inspeximus: agent memory with provenance, GDPR erasure